High-reliability non-volatile memory using a voting mechanism

ABSTRACT

A memory system includes a processing device (e.g., a controller implemented using a CPU, FPGA, and/or logic circuitry) and memory regions (e.g., in a flash memory or other non-volatile memory) storing data. The processing device receives an access request from a host system that is requesting to read the stored data. In one approach, the memory system is configured to: receive, from the host system over a bus, a read command to access data associated with an address in a non-volatile memory; in response to receiving the read command, access, by the processing device, multiple copies of data stored in at least one memory region of the non-volatile memory; match, by the processing device, data from the copies with each other; select, based on matching data from the copies with each other, first data from a first copy of the copies; and provide, to the host system over the bus, the first data as output data.

RELATED APPLICATIONS

The present application is a continuation application of U.S. patentapplication Ser. No. 16/189,697, filed Nov. 13, 2018, issued as U.S.Pat. No. 10,901,862 on Jan. 26, 2021, and entitled “HIGH-RELIABILITYNON-VOLATILE MEMORY USING A VOTING MECHANISM,” the disclosure of whichapplication is hereby incorporated by reference herein in its entirety.

This application is related to U.S. Non-Provisional application Ser. No.15/855,734, filed Dec. 27, 2017, entitled “Determination of Reliabilityof Vehicle Control Commands using a Voting Mechanism,” by Gil Golov, theentire contents of which application is incorporated by reference as iffully set forth herein.

FIELD OF THE TECHNOLOGY

At least some embodiments disclosed herein relate to memory systems ingeneral, and more particularly, to accessing data stored in anon-volatile memory.

BACKGROUND

Various error-detection and correction approaches are used in computingsystems. In some cases, error-detection and correction schemes are usedto add redundancy to a message. Recipients of the message can use theschemes to check consistency of the delivered message, and to recoverdata that has been determined to be corrupted.

In one example, error-detection and correction schemes are eithersystematic or non-systematic. In a systematic scheme, a transmittersends the original data, and attaches a fixed number of check bits (orparity data), which are derived from the data bits by a deterministicalgorithm. If only error detection is required, a receiver can apply thesame algorithm to the received data bits and compare its output with thereceived check bits. If the values do not match, an error has occurredat some point during the transmission. In a system that uses anon-systematic code, the original message is transformed into an encodedmessage carrying the same information and that has at least as many bitsas the original message.

The scheme is typically selected based on the characteristics of thecommunication channel. Common channel models include memory-less modelswhere errors occur randomly and with a certain probability, and dynamicmodels where errors occur primarily in bursts. Some error-detecting andcorrecting codes are suitable for a mixture of random errors and bursterrors.

In one example, error detection can be realized using a suitable hashfunction (or checksum algorithm). A hash function adds a fixed-lengthtag to a message, which enables receivers to verify the deliveredmessage by re-computing the tag and comparing it with the one provided.There are several different hash function designs. One commonly useddesign is a cyclic redundancy check, which can be used in detectingburst errors.

BRIEF DESCRIPTION OF THE DRAWINGS

The present disclosure will be understood more fully from the detaileddescription given below and from the accompanying drawings of variousembodiments of the disclosure.

FIG. 1 illustrates an example computing system having a votingcomponent, in accordance with some embodiments of the presentdisclosure.

FIG. 2 illustrates an example memory system that uses a majority voterto access data stored in a non-volatile memory, in accordance with someembodiments of the present disclosure.

FIG. 3 illustrates an example solid-state drive that uses a majorityvoter for responding to read commands received from a host system, inaccordance with some embodiments of the present disclosure.

FIG. 4 illustrates an example autonomous vehicle having a host systemthat accesses data stored in a non-volatile memory, in accordance withsome embodiments of the present disclosure.

FIG. 5 illustrates an example of a vehicle configured using anartificial neural network (ANN) model, according to one embodiment.

FIG. 6 is a flow diagram of an example method of reading reliable datafrom a non-volatile memory by matching copies of stored data, inaccordance with some embodiments of the present disclosure.

FIG. 7 is a block diagram of an example computer system in whichembodiments of the present disclosure can operate.

DETAILED DESCRIPTION

At least some aspects of the present disclosure are directed to using avoting mechanism to access data stored in a non-volatile memory. In oneexample, the voting mechanism is a majority voter that is used to selectdata from one of multiple copies of the data stored in the non-volatilememory. In one example, data entries of stored code are readsequentially (e.g., each corresponding entry of code is read one-by-onefrom each of the multiple copies in parallel), and the voting mechanismis used to select an error-free data entry as each data entry is read.In one example, the data entries are read from boot code stored in aboot partition of a non-volatile memory. In other examples, the dataentries can be read from other types of stored data (e.g., a file or setof files, or a partition storing other types of data).

In prior approaches, a non-volatile memory is used to storehighly-sensitive data, for example, as computer software/code andapplications that are read from the non-volatile memory and stored intovolatile memory (e.g., RAM) of a host system. In one example, the datais read during a boot process of the host system. Such sensitive code isoften stored in a special boot partition of the non-volatile memory.

Because of the sensitivity of the stored data, two or more copies of theidentical code are stored along with a CRC checksum code that is used todetect data errors when reading the stored data. During boot time, aprocessing unit, for example, reads a first copy of the data from theboot partition, calculates its CRC checksum code, and compares the codeto a code that is stored in the non-volatile memory. If there is a CRCmatch, then the read data is valid and the processing unit can start toexecute the data code. However, if there is a CRC mismatch, theprocessing unit ignores the data and reads a second copy of the codefrom the boot partition, calculates the CRC, and determines if there isa CRC match. The processing unit repeats the foregoing CRC matchingprocess with additional copies of the code if necessary.

It has been recognized that there are several technical problemsassociated with the above CRC matching process. For example, in a caseof CRC mismatch, a long time is required to execute the boot process.For example, the entire boot code needs to be read again from adifferent copy. Reading the entire code again significantly increasesthe boot time of the host system. In another example, the processingpower required by the processing unit and/or the host system isincreased due to reading a larger volume of code. Further, the prior CRCmatching process is complex due to having to re-read an entire code set,and the prior process can require significant software processingefforts for this reason.

At least some aspects of the present disclosure address the above andother technical problems by having, for example, a majority voterintegrated inside a non-volatile memory (e.g., integrated onto the samechip or die as the storage media of the non-volatile memory). In oneexample, the majority voter can access in parallel multiple copies ofboot code or other data that are stored in the non-volatile memory. Forexample, during a boot process, the majority voter reads the data inparallel from the various stored copies and generates an error-free(e.g., correct) data stream even if a data entry in one of the copies iscorrupted. The majority voter can provide error-free data, for example,if the error rate between the copies of the data accessed in parallelfor any given single entry does not exceed the correction power of themajority voter.

The use of the majority voter above provides a technological solutionwith several advantages. For example, use of the majority voter savesboot time in the case of corrupted boot partition or other stored data.For example, use of the majority voter simplifies the boot process taskor other data reading task, reduces software efforts required to readcorrect data, and reduces processing power that is required by theprocessing unit during booting or other data access.

In one embodiment, a memory system receives a request to access datastored in a non-volatile memory. For example, the request is receivedfrom a processing device (e.g., CPU, GPU, FPGA, etc.) of a host system.In response to receiving the request, the memory system accesses datafrom multiple copies of the data stored in the non-volatile memory. Avoting mechanism is used to match data from the copies with each other.In one example, the voting mechanism is a majority voter. In otherembodiments, other types of voting mechanisms can be used to comparedata from the copies with each other.

Based on matching the data from the copies with each other, the memorysystem selects data from one copy that has been determined to beerror-free. The memory system provides the selected data as an output.In one example, the selected data is sent to the host system in responseto a read command.

Various types of data can be stored in the copies. For example, thestored data can be associated with the operating system, software,software stacks, program variables, etc. Some of this stored data isgenerated by one or more software processes executing on one or moreprocessing devices, or is collected by one or more sensors in acomputing system. Some of the stored data corresponds to software (e.g.,dynamic linked libraries) that is loaded into system memory and thenused to execute the software processes.

In one example, the multiple copies are stored in memory regions of thenon-volatile memory. Examples of memory regions that can store datainclude regions storing data such as boot code, software programs,operating systems, sensor data, control parameters generated by amachine learning model, graphics video buffers, camera input buffers,artificial graphics, deep learning calculations, etc.

Thus, in light of the above, various embodiments of the presentdisclosure provide a voting component that uses a voting mechanism(e.g., a majority voter) in combination with accessing multiple storedcopies of data to select reliable and/or error-free data stored in anon-volatile memory. In one example, the selected data is provided asoutput data in response to a read request received from a host system.

The voting component of the present disclosure can be implemented invarious computing systems. In one example system, a processing device(e.g., a system-on-chip (SOC), FPGA, CPU, or GPU) stores and/or accessesdata stored in non-volatile memory device(s) (e.g., devices using NANDflash memory or cross point memory (such as 3DXP memory), or a SSD).

FIG. 1 illustrates an example computing system having a voting component107, in accordance with some embodiments of the present disclosure. Ahost system 101 communicates over a bus 103 with a memory system 105. Aprocessing device 111 of memory system 105 has read and write access tomemory regions 111, 113, . . . , 119 of non-volatile memory 123. In oneexample, host system 101 reads data from and writes data to non-volatilememory 123.

In one example, the processing device 111 and the memory regions 111,113, . . . , 119 are on the same chip or die. In some embodiments, thememory regions store data used by the host system 101 and/or theprocessing device 111 during machine learning processing and/or otherdata generated by software process(es) executing on host system 101 oron processing device 111.

The computing system includes a voting component 107 in the memorysystem 105 that uses a voting mechanism to select an error-free copyfrom multiple copies stored in one or more memory regions of the memorysystem 105. The computing system can further include a voting component107 in the host system 120 that coordinates with the voting component107 in the memory system 105 to at least facilitate read access to datastored in one or more memory regions.

In various embodiments, the voting component 107 selects one copy of thecopies stored in one or more memory regions of non-volatile memory 123.For example, a voting mechanism can be used to select a copy frommultiple copies for data requested in a read command received from hostsystem 101.

In one embodiment, memory system 105 receives a request to access datastored in non-volatile memory 123. In response receiving the request,memory system 105 accesses data from multiple copies stored in one ormore of the memory regions. A voting mechanism is used to match datafrom the copies with each other. In one example, the voting mechanism isa majority voter. Based on matching the data from the copies with eachother, the voting mechanism selects data from one of the copies that isdetermined to be error-free. The memory system 105 provides the selecteddata in response to the request to access the data. In one example, therequest to access the data is received over bus 103 from host system101.

In some embodiments, non-volatile memory 123 is used to store data inresponse to a write command received over bus 123 from a processingdevice (not shown) of host system 101. In one embodiment, a process ofhost system 101 determines the memory regions used by the votingmechanism for selecting data.

In some embodiments, processing device 111 includes at least a portionof the voting component 107. In other embodiments, or in combination,the processing device 111 and/or a processing device in the host system101 includes at least a portion of the voting component 107. Forexample, processing device 111 and/or a processing device of the hostsystem 101 can include logic circuitry implementing certain portions ofthe voting component 107. For example, a controller or processing device(processor) of the host system 101 can be configured to executeinstructions stored in memory for performing the operations of certainof the steps of the voting component 107 described herein.

In some embodiments, the voting component 107 is implemented in anintegrated circuit chip disposed in the memory system 105. In otherembodiments, portions of the voting component 107 in the host system 120can be part of an operating system of the host system 120, a devicedriver, or an application.

An example of memory system 105 is a memory module that is connected toa central processing unit (CPU) via a memory bus. Examples of memorymodules include a dual in-line memory module (DIMM), a small outlineDIMM (SO-DIMM), a non-volatile dual in-line memory module (NVDIMM), etc.In some embodiments, the memory system can be a hybrid memory/storagesystem that provides both memory functions and storage functions. Ingeneral, a host system can utilize a memory system that includes one ormore memory regions. The host system can provide data to be stored atthe memory system and can request data to be retrieved from the memorysystem. In one example, a host can access various types of memory,including volatile and non-volatile memory.

The host system 101 can be a computing device such as a controller in avehicle, a network server, a mobile device, a cellular telephone, anembedded system (e.g., an embedded system having a system-on-chip (SOC)and internal or external memory), or any computing device that includesa memory and a processing device. The host system 101 can include or becoupled to the memory system 105 so that the host system 101 can readdata from or write data to the memory system 105. The host system 101can be coupled to the memory system 105 via a physical host interface.As used herein, “coupled to” generally refers to a connection betweencomponents, which can be an indirect communicative connection or directcommunicative connection (e.g., without intervening components), whetherwired or wireless, including connections such as electrical, optical,magnetic, etc. Examples of a physical host interface include, but arenot limited to, a serial advanced technology attachment (SATA)interface, a peripheral component interconnect express (PCIe) interface,universal serial bus (USB) interface, Fibre Channel, Serial AttachedSCSI (SAS), a double data rate (DDR) memory bus, etc. The physical hostinterface can be used to transmit data between the host system 101 andthe memory system 105. The physical host interface can provide aninterface for passing control, address, data, and other signals betweenthe memory system 105 and the host system 101. FIG. 1 illustrates amemory system 105 as an example. In general, the host system 101 canaccess multiple memory systems via a same communication connection,multiple separate communication connections, and/or a combination ofcommunication connections.

The host system 101 can include a processing device and a controller(not shown). The processing device of the host system 101 can be, forexample, a microprocessor, a central processing unit (CPU), a processingcore of a processor, an execution unit, etc. In some instances, thecontroller of the host system can be referred to as a memory controller,a memory management unit, and/or an initiator. In one example, thecontroller controls the communications over bus 103 between the hostsystem 101 and the memory system 105.

A controller of the host system 101 can communicate with a controller ofthe memory system 105 to perform operations such as reading data,writing data, or erasing data at the memory regions of non-volatilememory 123. In some instances, the controller is integrated within thesame package of the processing device 111. In other instances, thecontroller is separate from the package of the processing device 111.The controller and/or the processing device can include hardware such asone or more integrated circuits and/or discrete components, a buffermemory, a cache memory, or a combination thereof. The controller and/orthe processing device can be a microcontroller, special purpose logiccircuitry (e.g., a field programmable gate array (FPGA), an applicationspecific integrated circuit (ASIC), etc.), or another suitableprocessor.

In one embodiment, the memory regions 111, 113, . . . , 119 can includeany combination of different types of non-volatile memory components. Insome embodiments, the memory regions can be, but are not limited to,NAND flash memory or cross point memory. In some embodiments, thenon-volatile memory can include read-only memory, flash memory,ferroelectric RAM, and computer storage devices (e.g. hard disk drivesand solid state drives). Furthermore, the memory cells of the memoryregions can be grouped as memory pages or data blocks that can refer toa unit used to store data. In some embodiments, the memory map can flagmemory pages or data blocks.

In one embodiment using voting component 107, one or more controllers ofthe memory system 105 can communicate with the memory regions 111, 113,. . . , 119 to perform operations related to reading data. Eachcontroller can include hardware such as one or more integrated circuitsand/or discrete components, a buffer memory, or a combination thereof.Each controller can be a microcontroller, special purpose logiccircuitry (e.g., a field programmable gate array (FPGA), an applicationspecific integrated circuit (ASIC), etc.), or another suitableprocessor. The controller(s) can include a processing device (processor)configured to execute instructions stored in local memory. In oneexample, local memory of the controller includes an embedded memoryconfigured to store instructions for performing various processes,operations, logic flows, and routines that control operation of thememory system 105, including handling communications between the memorysystem 105 and the host system 101. In some embodiments, the localmemory can include memory registers storing memory pointers, fetcheddata, etc. The local memory can also include read-only memory (ROM) forstoring micro-code.

In general, controller(s) of memory system 105 can receive commands oroperations from the host system 101 and/or processing device 111 and canconvert the commands or operations into instructions or appropriatecommands to achieve the data transfer for the identified memory regions.The controller can also be responsible for other operations such as wearleveling operations, garbage collection operations, error detection anderror-correcting code (ECC) operations, encryption operations, cachingoperations, and address translations between a logical block address anda physical block address that are associated with the memory regions.The controller can further include host interface circuitry tocommunicate with the host system 101 via the physical host interface.The host interface circuitry can convert the commands received from thehost system into command instructions to access one or more of thememory regions as well as convert responses associated with the memoryregions into information for the host system 101.

The memory system 105 can also include additional circuitry orcomponents that are not illustrated. In some embodiments, the memorysystem 105 can include a cache or buffer (e.g., DRAM or SRAM) andaddress circuitry (e.g., a row decoder and a column decoder) that canreceive an address from one or more controllers and decode the addressto access the memory regions.

In some embodiments, a controller in the host system 101 or memorysystem 105, and/or the processing device 111 includes at least a portionof the voting component 107. For example, the controller and/or theprocessing device 111 can include logic circuitry implementing portionsof the voting component 107. For example, a processing device(processor) can be configured to execute instructions stored in memoryfor performing operations that provide read/write access to memoryregions for the voting component 107 as described herein. In someembodiments, the voting component 107 is part of an operating system, adevice driver, or an application.

FIG. 2 illustrates an example memory system that uses a majority voter213 to access data stored in a non-volatile memory 225, in accordancewith some embodiments of the present disclosure. For example, copiesstored in one or more of memory regions 201, 203, 205 of non-volatilememory 225 can be accessed by majority voter 213. The voting mechanism(here, for example, including majority voter 213) is controlled byprocessing device 217.

In one example, processing device 217 receives read and write commandsfrom host system 101 over bus 103. The read command can be sent, forexample, by processing device 207 of the host system 101. In response tothe read command, the majority voter 213 selects data for providing asoutput data. The selected data is provided to bus 103 by communicationinterface 211. The selected data is copied by processing device 207 intovolatile memory 209 of host system 101. In one example, volatile memory209 is dynamic random-access memory (DRAM). In one example, volatilememory 209 is system memory for processing device 207.

In one embodiment, the data accessed by majority voter 213 is loadedinto cache 215 from each of the memory regions. In one embodiment, adata entry is loaded from each of memory regions 201, 203, and 205. Insome cases, the data entry is accompanied by a code. In one example, thecode is a hash of the data entry.

In one embodiment, the majority voter 213 compares each data entry toone another. If all three entries match, the majority voter 213 selectsone of the data entries to provide as output data. If only two of theentries match, then the majority voter 213 selects one of the matchingentries to provide as output data. If none of the entries match, thenthe majority voter 213 provides a signal to processing device 217indicating that there is a data read failure or other error, and/or themajority voter 213 can initiate other corrective action (e.g.,initiating a memory test of one or more memory regions).

In one embodiment, the majority voter 213 is implemented using logiccircuitry. For example, the majority voter 213 can be implemented usinglogic gates. In other embodiments, the majority voter 213 can beimplemented using processing device 217. In some cases, the majorityvoter 213 can be implemented using both logic circuitry and software.

In other embodiments, majority voter 213 can use a number of inputs thatis greater than three. For example, the number of inputs can be an oddinteger having a value of five or greater (e.g., 5, 7, 9, . . . ) (moregenerally, e.g., 2n+1, wherein n=1, 2, 3, . . . ). In one example, themajority voter 213 selects a data entry from a copy that matches amajority of a total number of data entries from the copies.

In some embodiments, host system 101 makes requests for access to datastored in a boot partition 221. In this case, multiple copies are loadedfrom boot partition 221 into cache 215 for selection of error-free data(e.g., a set of sequential data entries).

In other embodiments, the request for access is for data stored in oneor more identified files 223. In this case, multiple copies are loadedfrom the one or more identified files 223 into cache 215.

In some embodiments, processing device 217 and/or processing device 207identify one or more memory partitions 219 for which majority voter 213will be used for servicing read requests received for data stored in oneor more of the memory partitions 219. In this case, the multiple copiesare loaded from the memory partition(s) 219 into cache 215.

In some embodiments, processing device 217 can configure the majorityvoter 213 to vary the number of copies loaded into cache 215 and usedduring the matching process. For example, data from boot partition 221can be selected using a five-input majority voter 213, while data fromidentified files 223 and/or a memory partition 219 can be selected usinga three-input majority voter 213.

In alternative embodiments, another form of voting mechanism instead ofmajority voter 213 can be used. For example, a voting mechanism can beused that determines that a threshold number of data entries from themultiple copies loaded into cache 215 match each other. One of thesematching copies can be selected as output data. In some cases, amatching copy is selected based on achieving the threshold number ofmatches even if less than a majority of copies match one another.

In one embodiment, a read command is received from host system 101. Theread command is associated with a logical address. Processing device 217determines physical addresses within memory regions 201, 203, 205 thatcorrespond to the logical address. Data entries from multiple copies atthese physical addresses are sequentially loaded into cache 215 asentries are sequentially read from non-volatile memory 225 and providedto host system 101.

In one embodiment, data portions can be read from each of the memoryregions. In one example, the data portions correspond to blocks or pagesof data.

In one embodiment, each data entry or data portion loaded from themultiple copies of data is associated with a code. Processing device 217and/or majority voter 213 can execute a process to determine anevaluation result for each loaded data entry or data portion. In oneembodiment, the evaluation result is a hash that is compared to the codeassociated with the respective data entry or data portion. In oneembodiment, matching data from the multiple copies can be based at leastin part on the evaluation result that is determined. For example, if ahash of a data entry or data portion does not match the code, then thedata entry or data portion can be deemed to be erroneous and thus notconsidered to match other copies.

In another embodiment, an evaluation result for a data entry from afirst copy can be compared to an evaluation result for a data entry froma second copy. The evaluation results can be compared as part ofdetermining whether there is a match of the data between the copies.

In one example, volatile memory 209 includes DRAM and/or SRAM. In oneexample, processing device 217 is a state machine that receives readcommands (e.g., read commands to read a block or page of data).

In one embodiment, data transfer by processing device 217 is initiatedby a signal sent by processing device 207 to processing device 217. Thesignal can be sent in response to various events as determined byprocessing device 207. For example, a machine learning model can providea result to processing device 207. The signal can be sent in response tothe result.

In one embodiment, the machine learning model receives inputs based ondata received from various computing systems. In one example, the datais sensor data received from vehicle systems of an autonomous vehicle.

In one embodiment, the machine learning model monitors data associatedwith a power source. An output from machine learning model can be usedby processing device 207 as a basis for initiating data transfer (e.g.,responding to a read command) by processing device 217 and/or managingthe allocation of power to processing devices from the power source(e.g., allocation in real-time during the data transfer process).

Non-volatile memory 225 is an example of non-volatile memory 123. In oneexample, non-volatile memory 225 is flash memory and/or a solid-statedrive (SSD).

In one embodiment, system memory used by processing device 207 residesin volatile memory 209. Processing device 207 can initiate a datatransfer process in response to various events (e.g., a detection of aloss of power to a memory or other component of the computing system).

In one embodiment, a host system (e.g., host system 101) can collectdata from sensors of an embedded system. For example, the sensors can belocated on an autonomous vehicle and collect image data used fornavigation of the vehicle. In one embodiment, the sensor data is inputto the machine learning model (e.g., a neural network) and an output isused to control the vehicle. In one embodiment, the processingassociated with a neural network is performed by processing device 207,either alone or in conjunction with a processing device of the hostsystem.

In one embodiment, a neural network is trained or operated usingprocessing device 207. During training or other operation of the neuralnetwork, data is read from and written to volatile memory 209 and/ornon-volatile memory 225.

In one embodiment, the processing device 217 and the non-volatile memory225 are disposed on the same chip or die, and the processing device 207uses stored data from non-volatile memory 225 and/or volatile memory 209as an input to a computer model for machine learning. In one embodiment,the computer model is a neural network. In one embodiment, theprocessing device 207 provides data as an output from the computermodel.

In one embodiment, controller(s) used to access non-volatile memory 225can include hardware such as one or more integrated circuits and/ordiscrete components, a buffer memory, or a combination thereof. Thecontroller can be a microcontroller, special purpose logic circuitry(e.g., a field programmable gate array (FPGA), an application specificintegrated circuit (ASIC), etc.), or another suitable processor. Thecontroller can include one or more processors (processing devices)configured to execute instructions stored in local memory.

Local memory of the controller can include an embedded memory configuredto store instructions for performing various processes, operations,logic flows, and routines that control aspects of operation for thememory system. Local memory of the controller can include read-onlymemory (ROM) for storing micro-code and/or memory registers storing, forexample, memory pointers, fetched data, etc.

FIG. 3 illustrates an example solid-state drive 300 that uses majorityvoter 213 for responding to read commands received from host system 101,in accordance with some embodiments of the present disclosure.Solid-state drive 300 is an example of non-volatile memory 123 ornon-volatile memory 225.

In one embodiment, multiple copies of data are stored at physicaladdresses 301, 303, and 305. Processing device 307 receives a readcommand from host system 101. The read command is sent by processingdevice 207 and includes one or more logical addresses 311 correspondingto data that the host system 101 desires to access. Processing device307 evaluates the logical address 311 and determines that the desireddata corresponds to physical addresses 301, 303, and 305.

A data copy from each of the physical addresses 301, 303, and 305 isloaded into cache 215. Matching of the data copies is performed bymajority voter 213, for example, similarly as described above.

In one embodiment, solid-state drive 300 includes a flash translationlayer 309. The flash translation layer maps logical address 311 receivedfrom host system 101 to physical addresses 301, 303, and 305, whichcorrespond to multiple identical copies of the data requested by thehost system 101 in the read command.

In one embodiment, the flash translation layer 309 maps the logicaladdress 311 to 2n+1 of physical addresses in solid-state drive 300,where n is an integer equal to one or greater, and where the physicaladdresses correspond to storage locations of the multiple copies inmemory regions of the solid-state drive 300. In other embodiments, flashtranslation layer 309 can be used with non-volatile memory 225.

In one embodiment, flash translation layer 309 can be configured inreal-time by processing device 307. For example, processing device 307can configure flash translation layer 309 to map the logical address toa varying number of multiple copies and/or varying number of physicaladdresses for each read request received from host system 102, or foreach type of read request received from the system 102. For example, fora first read request, 5 copies may be accessed in parallel. For a secondread request, 3 copies may be accessed in parallel.

In one embodiment, processing device 207 of host system 101 monitorsvarious types of data collected from sensors and one or more computingsystems. Based on monitoring this collected data, processing device 207can determine that an event has occurred and in response to thisdetermination, send a read command to solid-state drive 300. Forexample, the event can be associated with the operation of one or moreof computing systems. In one example, sensors include one or moreaccelerometers of an autonomous vehicle. In response to determining thatan event has occurred, processing device 207 initiates reading of databy sending a signal over bus 103 to processing device 307.

FIG. 4 illustrates an example autonomous vehicle 402 having a hostsystem 411 that accesses data stored in a non-volatile memory 410, inaccordance with some embodiments of the present disclosure. Host system411 is an example of host system 101. Non-volatile memory 410 is anexample of non-volatile memory 225 or solid-state drive 300.

In one embodiment, host system 411 monitors collected data and initiatesa data transfer process based on the monitoring, in accordance with someembodiments of the present disclosure. For example, the data transferprocess is reading of data from non-volatile memory 410.

In one embodiment, the collected data is generated or collected by asoftware component 412 and/or is sensor data received from sensors 418.Autonomous vehicle 402 is, for example, a car, truck, boat, plane,helicopter, or unmanned aerial vehicle (e.g., a drone).

In one embodiment, non-volatile memory 410 stores data generated bysoftware component 412 of host system 411 prior to initiating the datatransfer.

In one embodiment, during the data transfer process, data is copied fromnon-volatile memory 410 to volatile memory 408.

In one embodiment, processing device 414 initiates the data transferprocess. In order to initiate the data transfer process, processingdevice 414 sends a signal to controller 422. In response to receivingthe signal, controller 422 handles providing of some or all data in oneor more memory regions from non-volatile memory 410 to volatile memory408. Processing device 414 may send data to controller 422 thatindicates memory regions from which to access multiple copies inparallel and/or provide data that is evaluated by controller 422 todetermine memory regions from which to access multiple copies inparallel.

In one embodiment, host system 402 provides data for displayinggraphical images on display 404 for a user of autonomous vehicle 402.Memory regions of volatile memory 408 can store data corresponding tothe presented display.

In one embodiment, a power source 406 is used to provide power tovolatile memory 408. Host system 411 is configured to detect animpending loss of power from power source 406. In response to detectingthe impending loss of power, host system 411 can initiate a datatransfer process.

In one embodiment, a controller 420 is an internal controller ofvolatile memory 408, and controller 422 is an internal controller ofnon-volatile memory 410. In one embodiment, host system 411 and/orcontroller 422 are powered by power source 406.

FIG. 5 illustrates an example of a vehicle 511 configured using anartificial neural network (ANN) model 519, according to one embodiment.ANN model 519 is an example of a machine learning model. Vehicle 511 isan example of autonomous vehicle 402.

The vehicle 511 includes an infotainment system 549, a communicationdevice 539, one or more sensors 537, and a computer 531 that isconnected to some controls of the vehicle 511, such as a steeringcontrol 541 for the direction of the vehicle 511, a braking control 543for stopping of the vehicle 511, an acceleration control 545 for thespeed of the vehicle 511, etc.

The computer 531 of the vehicle 511 includes one or more processors 533,memory 535 storing firmware (or software) 527, the ANN model 519, andother data 529. Computer 531 is an example of host system 101.

In one example, firmware 527 is updated by an over-the-air update inresponse to a communication from another host system (e.g., server) sentin response to identifying faulty software. Alternatively, and/oradditionally, other firmware of various computing devices or systems ofvehicle 511 can be updated.

The one or more sensors 537 may include a visible light camera, aninfrared camera, a LIDAR, RADAR, or sonar system, and/or peripheralsensors, which are configured to provide sensor input to the computer531. A module of the firmware (or software) 527 executed in theprocessor(s) 533 applies the sensor input to an ANN defined by the model519 to generate an output that identifies or classifies an event orobject captured in the sensor input, such as an image or video clip.Data from this identification and/or classification can be included indata collected by a memory device and sent from a vehicle to the server.

Alternatively, and/or additionally, identification of unsafe softwarecan be used by an autonomous driving module of the firmware (orsoftware) 527 to generate a response. The response may be a command toactivate and/or adjust one of the vehicle controls 541, 543, and 545. Inone embodiment, the response is an action performed by the vehicle wherethe action has been configured based on an update command from theserver (e.g., the update command can be generated by the server inresponse to determining that software of vehicle 511 is faulty based onanalysis of event data). In one embodiment, prior to generating thecontrol response, the vehicle is configured. In one embodiment, theconfiguration of the vehicle is performed by updating firmware ofvehicle 511. In one embodiment, the configuration of the vehicleincludes updating of the computer model stored in vehicle 511 (e.g., ANNmodel 519).

In one embodiment, the server stores received sensor input as part ofsensor data for further training or updating of the ANN model 519 usingan supervised training module. When an updated version of the ANN model519 is available in the server, the vehicle 511 may use thecommunication device 539 to download the updated ANN model 519 forinstallation in the memory 535 and/or for the replacement of thepreviously installed ANN model 519. These actions may be performed inresponse to determining that vehicle 511 is failing to properly detectobjects and/or in response to identifying unsafe software.

In one example, the outputs of the ANN model 519 can be used to control(e.g., 541, 543, 545) the acceleration of a vehicle (e.g., 511), thespeed of the vehicle 511, and/or the direction of the vehicle 511,during autonomous driving.

In one example, data obtained from a sensor of a vehicle may be an imagethat captures an object using a camera that images using lights visibleto human eyes, or a camera that images using infrared lights, or asonar, radar, or LIDAR system. In one embodiment, image data obtainedfrom at least one sensor of the vehicle is part of the collected datafrom the vehicle that is analyzed. In some instances, the ANN model isconfigured for a particular vehicle based on the sensor and othercollected data.

Memory 535 is an example of memory system 105. In one example, the dataobtained from one or more sensors of the vehicle can be stored involatile memory 408 or non-volatile memory 410.

In one embodiment, processor 533 sends a read command to memory 535. Inone example, processor 533 desires to reliably read firmware 527 and/orother data 529 from non-volatile memory using voting component 107 asdescribed above.

FIG. 6 is a flow diagram of an example method of reading reliable (e.g.,error-free) data from a non-volatile memory by matching copies of storeddata, in accordance with some embodiments of the present disclosure. Forexample, the method of FIG. 6 can be implemented in the system of FIGS.1-5.

The method of FIG. 6 can be performed by processing logic that caninclude hardware (e.g., processing device, circuitry, dedicated logic,programmable logic, microcode, hardware of a device, integrated circuit,etc.), software (e.g., instructions run or executed on a processingdevice), or a combination thereof. In some embodiments, the method ofFIG. 6 is performed at least in part by the voting component 107 of FIG.1.

Although shown in a particular sequence or order, unless otherwisespecified, the order of the processes can be modified. Thus, theillustrated embodiments should be understood only as examples, and theillustrated processes can be performed in a different order, and someprocesses can be performed in parallel. Additionally, one or moreprocesses can be omitted in various embodiments. Thus, not all processesare required in every embodiment. Other process flows are possible.

At block 601, a read command to access data associated with an addressin a non-volatile memory is received. For example, a read command isreceived from host system 101 to access data stored in non-volatilememory 225. In one example, the address is logical address 311.

At block 603, in response to receiving the read command, multiple copiesof data stored in at least one memory region of the non-volatile memoryare accessed. For example, data entries in memory regions 201, 203, and205 are accessed by majority voter 213.

At block 605, data from each of the copies is matched with each other.For example, each of the data entries is loaded into cache 215. Majorityvoter 213 compares the data entries to one another to determine which ofthe data entries match one another.

At block 607, data from one of the copies is selected. The data isselected based on matching data from the copies with each other. Forexample, the data entry from memory region 201 is selected for providingas output data to host system 101. This data entry is selected based onthe data entry matching the majority of the data entries loaded intocache 215, as determined by majority voter 213.

At block 609, the selected data is provided as output data. For example,the matching data entry selected by the majority voter 213 is providedas output data and sent over bus 103 to host system 101. The output datais stored in volatile memory 209 under control of processing device 207.

In one aspect, the present disclosure includes computing apparatusesperforming any of the methods and non-transitory computer-readablestorage media storing instructions that, when executed by a processingdevice, cause the processing device to perform any of the methods.

In one embodiment, a method for a non-volatile memory (e.g.,non-volatile memory 123 or 225) comprises: receiving, from a host systemover a bus, a read command to access data associated with an address inthe non-volatile memory; in response to receiving the read command,accessing, by a processing device, multiple copies of data stored in atleast one memory region (e.g., 201, 203, 205) of the non-volatilememory; matching, by the processing device, data from the copies witheach other; selecting, based on matching data from the copies with eachother, first data from a first copy of the copies; and providing, to thehost system over the bus, the first data as output data.

In one embodiment, matching data from the copies with each othercomprises matching each of a sequential series of corresponding entriesread in parallel from each of the copies for responding to the readcommand.

In one embodiment, the data associated with an address in thenon-volatile memory is boot code stored in a boot partition of thenon-volatile memory.

In one embodiment, a threshold number of data entries from the copies,including a data entry from the first copy, match each other.

In one embodiment, a total number of copies is accessed, and thethreshold number is a majority of the total number.

In one embodiment, the method further comprises evaluating, by theprocessing device, data from each copy to provide a respectiveevaluation result.

In one embodiment, matching data from the copies with each othercomprises comparing a first evaluation result for data from the firstcopy to a second evaluation result for data from a second copy of thecopies.

In one embodiment, the respective evaluation result is a hash.

In one embodiment, the method further comprises comparing eachrespective evaluation result to an error-detecting code associated withthe respective copy (e.g., the code stored in memory region 201 asassociated with the data entry in memory region 201).

In one embodiment, matching data from the copies with each othercomprises using a bitwise operation that compares data from the firstcopy to data from a second copy of the copies.

In one embodiment, a system comprises: non-volatile memory; a processingdevice; and memory storing instructions configured to instruct theprocessing device to: receive a request to access data; in response toreceiving the request, access data from multiple copies stored in thenon-volatile memory; match data from the copies with each other; select,based on matching the data from the copies with each other, first dataassociated with a first copy of the copies; and provide the first dataas an output from the non-volatile memory.

In one embodiment, the system further comprises a cache (e.g., cache215) and a majority voter (e.g., majority voter 213), wherein data fromthe multiple copies is loaded into the cache in response to receivingthe request, and wherein matching data from the copies with each othercomprises reading, by the majority voter, the data from the multiplecopies in the cache to perform an evaluation of the multiple copies.

In one embodiment, the request to access data is received from a hostsystem (e.g., host system 101), wherein providing the first datacomprises sending the first data to the host system, and wherein thehost system is configured to store the first data in a volatile memory(e.g., volatile memory 209) of the host system.

In one embodiment, each of the copies comprises a plurality of dataportions (e.g., a data entry in memory region 201), and accessing datafrom the multiple copies comprises reading, in parallel, a correspondingfirst portion from each of the copies.

In one embodiment, the request to access data includes a logical address(e.g., logical address 311), and each corresponding first portion isstored in the non-volatile memory (e.g., non-volatile memory 225) at arespective physical address that corresponds to the logical address.

In one embodiment, matching data from the copies with each othercomprises matching each of a sequential series of corresponding entriesread in parallel from each of the copies.

In one embodiment, the data stored in the non-volatile memory is anidentified partition of the non-volatile memory, or is a set of filesstored in the non-volatile memory.

In one embodiment, the non-volatile memory is a solid-state drive (e.g.,solid-state drive 300), and the system further comprises a flashtranslation layer, wherein the flash translation layer maps a logicaladdress received from a host system to physical addresses associatedwith the multiple copies.

In one embodiment, the flash translation layer further maps the logicaladdress to 2n+1 of the physical addresses, wherein n is an integer equalto one or greater, and wherein the physical addresses correspond tostorage locations of the multiple copies in at least one memory regionof the non-volatile memory.

In one embodiment, a non-transitory computer-readable storage mediumstores instructions that, when executed by at least one processingdevice, cause the at least one processing device to perform a method,the method comprising: receiving a request to access data in anon-volatile memory; in response to receiving the request, accessingdata from multiple copies stored in the non-volatile memory; matchingdata from the copies with each other; selecting, based on matching thedata from the copies with each other, first data from a first copy ofthe copies; and providing the first data as an output from thenon-volatile memory.

In one embodiment, the majority voter is not limited to use when readingboot data. Instead, the majority voter can be used to protect aparticular partition or a particular set of files. A controller can bebuilt with such capability for selected data that needs extraprotection. Thus, the protection can be initiated on demand (instead ofhaving to be set up at a time of partitioning a storage device).

In one embodiment, an SSD has a flash translation layer that maps alogic block address received from a host/CPU to a physical address inthe SSD. The flash translation layer can be configured to map a logicblock address to 2n+1 physical addresses and thus enable use of amajority voter any time the host/CPU may desire.

FIG. 7 is a block diagram of an example computer system 200 in whichembodiments of the present disclosure can operate. In one embodiment, incomputer system 200 a set of instructions, for causing a machine toperform any one or more of the methodologies discussed herein, can beexecuted. In some embodiments, the computer system 200 can correspond toa memory system, or to a host system that includes, is coupled to, orutilizes a memory system (e.g., the memory system 105 of FIG. 1) or canbe used to perform the operations of a voting component 107 (e.g., toexecute instructions to perform operations corresponding to the votingcomponent 107 described with reference to FIGS. 1-6). In alternativeembodiments, the machine can be connected (e.g., networked) to othermachines in a LAN, an intranet, an extranet, and/or the Internet. Themachine can operate in the capacity of a server or a client machine inclient-server network environment, as a peer machine in a peer-to-peer(or distributed) network environment, or as a server or a client machinein a cloud computing infrastructure or environment.

The machine can be a personal computer (PC), a tablet PC, a set-top box(STB), a Personal Digital Assistant (PDA), a cellular telephone, a webappliance, a server, a network router, a switch or bridge, or anymachine capable of executing a set of instructions (sequential orotherwise) that specify actions to be taken by that machine. Further,while a single machine is illustrated, the term “machine” shall also betaken to include any collection of machines that individually or jointlyexecute a set (or multiple sets) of instructions to perform any one ormore of the methodologies discussed herein.

The example computer system 200 includes a processing device 202, a mainmemory 204 (e.g., read-only memory (ROM), flash memory, dynamic randomaccess memory (DRAM) such as synchronous DRAM (SDRAM) or Rambus DRAM(RDRAM), static random access memory (SRAM), etc.), and a data storagesystem 218, which communicate with each other via a bus 230 (which caninclude multiple buses).

Processing device 202 represents one or more general-purpose processingdevices such as a microprocessor, a central processing unit, or thelike. More particularly, the processing device can be a complexinstruction set computing (CISC) microprocessor, reduced instruction setcomputing (RISC) microprocessor, very long instruction word (VLIW)microprocessor, or a processor implementing other instruction sets, orprocessors implementing a combination of instruction sets. Processingdevice 202 can also be one or more special-purpose processing devicessuch as an application specific integrated circuit (ASIC), a fieldprogrammable gate array (FPGA), a digital signal processor (DSP),network processor, or the like. The processing device 202 is configuredto execute instructions 226 for performing the operations and stepsdiscussed herein. The computer system 200 can further include a networkinterface device 208 to communicate over the network 220.

The data storage system 218 can include a machine-readable storagemedium 224 (also known as a computer-readable medium) on which is storedone or more sets of instructions 226 or software embodying any one ormore of the methodologies or functions described herein. Theinstructions 226 can also reside, completely or at least partially,within the main memory 204 and/or within the processing device 202during execution thereof by the computer system 200, the main memory 204and the processing device 202 also constituting machine-readable storagemedia. The machine-readable storage medium 224, data storage system 218,and/or main memory 204 can correspond to the memory system 105 of FIG.1.

In one embodiment, the instructions 226 include instructions toimplement functionality corresponding to a voting component 107 (e.g.,the voting component 107 described with reference to FIGS. 1-6). Whilethe machine-readable storage medium 224 is shown in an exampleembodiment to be a single medium, the term “machine-readable storagemedium” should be taken to include a single medium or multiple mediathat store the one or more sets of instructions. The term“machine-readable storage medium” shall also be taken to include anymedium that is capable of storing or encoding a set of instructions forexecution by the machine and that cause the machine to perform any oneor more of the methodologies of the present disclosure. The term“machine-readable storage medium” shall accordingly be taken to include,but not be limited to, solid-state memories, optical media, and magneticmedia.

Some portions of the preceding detailed descriptions have been presentedin terms of algorithms and symbolic representations of operations ondata bits within a computer memory. These algorithmic descriptions andrepresentations are the ways used by those skilled in the dataprocessing arts to most effectively convey the substance of their workto others skilled in the art. An algorithm is here, and generally,conceived to be a self-consistent sequence of operations leading to adesired result. The operations are those requiring physicalmanipulations of physical quantities. Usually, though not necessarily,these quantities take the form of electrical or magnetic signals capableof being stored, combined, compared, and otherwise manipulated. It hasproven convenient at times, principally for reasons of common usage, torefer to these signals as bits, values, elements, symbols, characters,terms, numbers, or the like.

It should be borne in mind, however, that all of these and similar termsare to be associated with the appropriate physical quantities and aremerely convenient labels applied to these quantities. The presentdisclosure can refer to the action and processes of a computer system,or similar electronic computing device, that manipulates and transformsdata represented as physical (electronic) quantities within the computersystem's registers and memories into other data similarly represented asphysical quantities within the computer system memories or registers orother such information storage systems.

The present disclosure also relates to an apparatus for performing theoperations herein. This apparatus can be specially constructed for theintended purposes, or it can include a general purpose computerselectively activated or reconfigured by a computer program stored inthe computer. Such a computer program can be stored in a computerreadable storage medium, such as, but not limited to, any type of diskincluding floppy disks, optical disks, CD-ROMs, and magnetic-opticaldisks, read-only memories (ROMs), random access memories (RAMs), EPROMs,EEPROMs, magnetic or optical cards, or any type of media suitable forstoring electronic instructions, each coupled to a computer system bus.

The algorithms and displays presented herein are not inherently relatedto any particular computer or other apparatus. Various general purposesystems can be used with programs in accordance with the teachingsherein, or it can prove convenient to construct a more specializedapparatus to perform the method. The structure for a variety of thesesystems will appear as set forth in the description below. In addition,the present disclosure is not described with reference to any particularprogramming language. It will be appreciated that a variety ofprogramming languages can be used to implement the teachings of thedisclosure as described herein.

The present disclosure can be provided as a computer program product, orsoftware, that can include a machine-readable medium having storedthereon instructions, which can be used to program a computer system (orother electronic devices) to perform a process according to the presentdisclosure. A machine-readable medium includes any mechanism for storinginformation in a form readable by a machine (e.g., a computer). In someembodiments, a machine-readable (e.g., computer-readable) mediumincludes a machine (e.g., a computer) readable storage medium such as aread only memory (“ROM”), random access memory (“RAM”), magnetic diskstorage media, optical storage media, flash memory components, etc.

In the foregoing specification, embodiments of the disclosure have beendescribed with reference to specific example embodiments thereof. Itwill be evident that various modifications can be made thereto withoutdeparting from the broader spirit and scope of embodiments of thedisclosure as set forth in the following claims. The specification anddrawings are, accordingly, to be regarded in an illustrative senserather than a restrictive sense.

What is claimed is:
 1. A system comprising: a communication interfaceconfigured to receive a request from a host system, and provide outputdata to the host system in response to the request; a non-volatilememory configured to store copies of data; and a majority voterconfigured to, in response to receiving the request, access the copiesof data, and select one of the copies as the output data.
 2. The systemof claim 1, further comprising a cache configured to receive the copiesof data accessed by the majority voter.
 3. The system of claim 2,wherein the majority voter is further configured to read data from thecopies in the cache to perform an evaluation of the copies to select theone of the copies as the output data.
 4. The system of claim 1, whereinthe majority voter selects the one of the copies based on matching datafrom the copies with each other.
 5. The system of claim 4, wherein therequest is a read command, and matching data from the copies with eachother comprises matching each of a sequential series of correspondingentries read in parallel from each of the copies.
 6. The system of claim1, further comprising a boot partition, wherein the request from thehost system is a request for data stored in the boot partition.
 7. Thesystem of claim 1, wherein the majority voter is further configured tovary a number of the copies accessed.
 8. The system of claim 7, whereinthe number of copies accessed is determined based on at least one memoryregion of the non-volatile memory from which the copies are accessed. 9.The system of claim 1, wherein each of the copies is associated with acode stored in the non-volatile memory.
 10. The system of claim 9,wherein the majority voter is further configured to select the one ofthe copies as the output data by comparing a hash of each of the copiesto its respective code.
 11. The system of claim 1, wherein thecommunication interface is further configured to receive data from thehost system that indicates at least one memory region of thenon-volatile memory from which to access the copies.
 12. The system ofclaim 1, wherein the host system sends the request in response todetecting an impending loss of power from a power source.
 13. A methodcomprising: receiving a request from a host system for data stored in amemory; in response to receiving the request, accessing copies of thedata in the memory; performing, by a majority voter of the memory, anevaluation of the accessed copies; selecting, based on the evaluation,one of the copies as output data; and providing the output data to thehost system.
 14. The method of claim 13, wherein performing theevaluation comprises matching data from the copies with each other. 15.The method of claim 14, wherein matching data from the copies with eachother comprises matching each of a series of corresponding entries readfrom each of the copies.
 16. The method of claim 13, wherein each of thecopies of the data is stored in a different memory region of the memory.17. The method of claim 13, wherein the majority voter determines that amajority of a total number of the accessed copies match each other. 18.The method of claim 13, wherein the request includes a logical address,and each of the copies is stored in the memory at a respective physicaladdress that corresponds to the logical address.
 19. The method of claim18, wherein a flash translation layer of the memory maps the logicaladdress to each of the corresponding physical addresses.
 20. Anon-transitory computer-readable storage medium storing instructionsthat, when executed by at least one processing device, cause the atleast one processing device to perform a method, the method comprising:receiving a request for data stored in a memory; in response toreceiving the request, accessing copies of the data in the memory;performing, by a majority voter, an evaluation of the accessed copies;selecting, based on the evaluation, one of the copies as output data;and providing the output data as a reply to the request.